Ubiquiti airMAX and airFiber Products Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in several Ubiquiti products, including airMAX AC, airMAX M, airFiber AF60-XG, and airFiber AF60. This vulnerability allows a malicious actor within Wi-Fi range to exploit an issue in the airMAX Wireless Protocol, potentially leading to unauthorized code execution on the affected device.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Remediation

Users can update their airMAX AC to Version 8.7.21 or later, airMAX M to Version 6.3.24 or later, airFiber AF60-XG to Version 1.2.3 or later, and airFiber AF60 to Version 2.6.8 or later.